vembacher

Using OPC UA with server certificates.

5

I ran into the following issue of FUXA (current master branch) not trusting the server certificate when using an OPC UA device with security policies that use the server certificate...

JSON canonicalization uses multiple libraries.

3

**Description** Different parts of code use different libraries for JSON canonicalization. **Examples:** https://github.com/sigstore/sigstore-rs/blob/d5ba303182318495a081d1c4ad50d5c27be015cc/src/sign.rs#L327-L332 https://github.com/sigstore/sigstore-rs/blob/d5ba303182318495a081d1c4ad50d5c27be015cc/src/cosign/bundle.rs#L81-L88

Merkle tree proof implementation

33

#### Summary Related to: #283 This adds implementations for: - consistency proofs - inclusion proofs - checkpoint/STH related functionality The Merkle proofs are essentially ports of the [transparency-dev implementations](https://github.com/transparency-dev/merkle/tree/036047b5d2f7faf3b1ee643d391e60fe5b1defcf/proof), including...

Support for inclusion/consistency proofs and checkpoint/STH verification.

6

## Summary I would like to see support for inclusion/consistency proofs and checkpoints/STH. Also related: #274 ## Reasoning - inclusion proofs: enable stricter bundle/log entry verification compared to only verifying...

Improve API of cosign module.

1

## Introduction I think the cosign API could be improved at a number of places. I already gave [some feedback on the cosign API](https://github.com/sigstore/sigstore-rs/issues/274#issuecomment-1607010911) in #274: Toggle for previous feedback....